siemens ruggedcom ros vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Siemens RUGGEDCOM ROS 3.8.0 up to and including 4.1.x permanently enables the IP forwarding feature, which allows remote malicious users to bypass a VLAN isolation protection mechanism via IP traffic.

Siemens Ruggedcom Rugged Operating System 3.8.0 Siemens Ruggedcom Rugged Operating System 4.0.0 Siemens Ruggedcom Rugged Operating System 4.1.0

4.3

CVSSv2

The SSL layer of the HTTPS service in Siemens RuggedCom ROS prior to 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle malicious users to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014...

Siemens Ruggedcom Rox Ii Firmware -Siemens Ruggedcom Rugged Operating System

7.8

CVSSv2

The SNMP implementation in Siemens RuggedCom ROS prior to 3.11, ROS 3.11 for RS950G, ROS 3.12 prior to 3.12.4, and ROS 4.0 for RSG2488 allows remote malicious users to cause a denial of service (device outage) via crafted packets.

Siemens Ruggedcom Rugged Operating System Siemens Ruggedcom Rugged Operating System

5

CVSSv2

The web management interface in Siemens RuggedCom ROS prior to 3.11, ROS 3.11 prior to 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote malicious users to cause a denial of service (interface outage) via crafted HTTP packets.

Siemens Ruggedcom Rugged Operating System Siemens Ruggedcom Rugged Operating System

4.3

CVSSv2

Siemens RuggedCom Rugged Operating System (ROS) prior to 3.12, ROX I OS up to and including 1.14.5, ROX II OS up to and including 2.3.0, and RuggedMax OS up to and including 4.2.1.4621.22 use hardcoded private keys for SSL and SSH communication, which makes it easier for man-in-t...

Siemens Ros Siemens Rox I Os Siemens Rox Ii Os Siemens Ruggedmax Os

8.5

CVSSv2

RuggedCom Rugged Operating System (ROS) 3.10.x and previous versions has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote malicious users to obtain access by performing a calculation on this address value, and th...

Siemens Ruggedcom Rugged Operating System

1 EDB exploit

8.3

CVSSv2

The integrated HTTPS server in Siemens RuggedCom ROS prior to 3.12.2 allows remote malicious users to hijack web sessions by predicting a session id value.

Siemens Ruggedcom Rugged Operating System

3.3

CVSSv2

Siemens RUGGEDCOM ROS prior to 4.2.1 allows remote malicious users to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame.

Siemens Ruggedcom Rugged Operating System

8

CVSSv2

The integrated HTTPS server in Siemens RuggedCom ROS prior to 3.12.2 allows remote authenticated users to bypass intended restrictions on administrative actions by leveraging access to a (1) guest or (2) operator account.

Siemens Ruggedcom Rugged Operating System

8.5

CVSSv2

RuggedCom Rugged Operating System (ROS) prior to 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote malicious users to obtain access by performing a calculation on this address value, and then establishing a ...

Siemens Ruggedcom Rugged Operating System

1 EDB exploit

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook